The trick: Scope Swap
The headline says an AI hacked a government.
The report under the headline says the agents tried three times, and that none of the attempts it found appear to have got in.
Transluce's report says an attempted compromise of the Australian Institute of Health and Welfare (AIHW) is part of the first reported instance of agents hacking a government, and ABC News ran it as the 'first' government hack by autonomous AI.
Before you read on. Your call?
TRUE, BUT
3 attempts
the same report says none of the hacking attempts it identified appear to have succeeded, while noting its public records are incomplete. At AIHW, per Transluce, the agents probed for a vulnerability, were blocked, and then retrieved a public file from a pre-production server. An AIHW spokesperson told the ABC there is no evidence the agent accessed anything not publicly available.
The twist
an OpenAI agent did reach non-public files on a different government system, the Services Australia Medicare statistics portal, but per the ABC the urlquery and forum logs behind Transluce's claim contain no reference to Medicare or Services Australia. The 'first hack' label is attached to the attempt that, on the evidence in our record, did not work.
There’s more to this story.
Membership opens the full investigation, the strongest counterargument and what to do with what you’ve learned.
Start your free month →First membership: 30 days free, then A$89 a year. One introductory trial per customer. Card required; renews annually until cancelled. Cancel before the trial ends to avoid the first charge. Already a member? Sign in
Couldn't check your access. That's on us.
The trick has a name
We call it Scope Swap: applies to far less than it sounds like. You'll see it again. Learn to spot it →
Receipts
- Supports transluce.org:
This attempted compromise of AIHW is part of the first reported instance of agents hacking a government.
- Refutes transluce.org:
None of the hacking attempts we identified appear to have succeeded, though the public artifacts we analyzed are incomplete and we cannot rule out successful attempts through private scans or means other than urlquery.net.
- Context transluce.org:
Agents working on a pharmaceutical-data task probed for a vulnerability and retrieved a public file from a pre-production server after bot protection blocked the main site.
- Context transluce.org:
We directly link two of the three (AIHW and Data USA) to a previously reported agent swarm that OpenAI has publicly confirmed originated from them.
- Context transluce.org:
We classified 6,467 reports as containing significant evidence of agent-like activity, based on distinctive task-specific programs, task-linked exploit probes, or exact connections to known activity.
- Supports abc.net.au:
Health data attack the 'first' government hack by autonomous AI, researchers say
- Refutes abc.net.au:
At this stage, there is no evidence the agent accessed any information or data that is not publicly available
- Context abc.net.au:
The German coding forum and urlquery data logs do not show any reference to Medicare or Services Australia.
- Context abc.net.au:
Our initial review suggests that much of the activity described in Transluce's report overlaps with cases at varying stages of investigation in our ongoing review of misaligned model activity
- Context transluce.org:
The free online service urlquery.net allows a user to open a URL through a sandboxed remote browser.
- Context abc.net.au:
The researchers said the agents also tried to hack into the University of New Mexico and free online data platform DATA USA.
- Context abc.net.au:
It follows revelations announced by Prime Minister Anthony Albanese this morning that OpenAI's AI agents had also accessed non-public Medicare health statistics held by Services Australia.
- Context abc.net.au:
These two near-simultaneous incidents have not yet been publicly connected, however two sources with knowledge of the government's investigations said they believe they are.
- Context smbtech.au:
An OpenAI spokesperson confirmed the company’s models “took actions we did not intend” and that the accessed material “included aggregate health statistics and internal file names.”
- Refutes smbtech.au:
Marles confirmed that the agent’s interactions with three other government websites – the Australian Institute of Health and Welfare (AIHW), the Victorian Department of Health and the NSW Bureau of Crime Statistics and Research – were “entirely normal” and involved only publicly available information.
Open the Receipts Pack → What each source proves, every figure traced, and what would change our verdict.